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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a method for preventing an automobile user who has 
only a chip card from operating an automobile easily without permission. 

SOLUTION: A data carrier stores user intrinsic information about an owner. The information is 
detected by a reader, supplied into an onboard processor and compared with that stored 
therein. Further personal information is required of a user by an onboard identification device, 
supplied into the processor and compared with that about a permissible user identify stored in 
the onboard. According to results of the comparison of the personal data, an automobile is 
released to be operable. Thus, the automobile can be hardly used without permission even in 
the case of using a 'correct 1 chip card. 
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1. Title of Invention 

h Pro ce gg for Operational! v Releasing a Motor' Vehicle 
and a Chip Card an<3 Vehicle Pevj.ce Therefore 

2. Claims 

1. A process for operationally releasing a motor vehicle, 
for example by releasing the ignition system and/or 
fuel supply and/or disabling an alarm system of the 
motor vehicle, wherein the operational release takes 
place as a result of the supply of a data carrier > in 
particular a chip card, into an on-board reader, when 
the reader recognises that the, supplied data carrier 
is valid and has stored data authorising the release, 
characterised in that the data carrier has stored 
user-specific information relating to the owner of the 
data carrier, which information is detected by the 
reader, supplied to an on-board processor, and 
compared therein with information stored on-board, 
that as a function of the result of the comparison, 
further personal information is requested of the user 
by an on-board recognition device,, supplied to the on- 
board processor and compared with information stored 
on-board .relating to the identity of the permissible 
user(s), and that as a function of the result of the 
personal data comparison . the operational release of 
the motor vehicle does or. does not take place. 

2 . A process according to Claim 1 , characterised in that 
the personal information is input into > the recognition 
device in the form of an alphanumeric a 1 code, in particular 
a secret number generally known only. to the authorised 
users (personal identification number = PIN) . 

3. A process according to one of the preceding claims, 
characterised in that the personal information is supplied 
to the recognition device in the form of an electronic 
fingerprint of the user. 



4. A process according to one of the preceding claims, 
characterised in that the personal information is supplied 
to the recognition device by means of acoustic signals. 

5. A process according to Claim 4, characterised in. that 
the acoustic signals contain a. code which is recognised by 
an on-board speech recognition device and compared with a 
stored code word authorising the operational release. 

6. A process according to Claim 4 or 5, characterised in 
that the acoustic signals comprise voice signals emitted by 
the user and are compared in an on-board speech recognition 
device with stored frequency patterns of the voices. of 
specific users which authorise the operational release. 

7. A process according to one of the preceding . claims , 
characterised in that the personal information is supplied 
to the recognition device in the form of optical signals. 

8. A process according to Claim 7, characterised in that 
the optical signals comprise light of a specific frequency 
and/or pulse sequence and are compared on-board with stored 
frequencies and/or pulse sequences authorising the 
operational release . 

9. A process according to Claim 7 or 8, characterised . in 
that the optical signals comprise image patterns and are 
compared in an on-board image recognition device with 
stored image patterns authorising the operational release. 

10. A process according to Claim 9, characterised in that 
the image patterns comprise the face of the particular 
user. 

11. A process according to one of the preceding claims , 
characterised in that the personal information .is . supplied 
to the recognition device by means of weight signals . of . the 



particular user and that the weight signals are compared 
with weight values, stored on-board r of authorised users. 

12. A process according to one of the preceding claims, 
characterised in that the information stored on -board 
relating to the identity of the permissible user(s) can be 
altered by means of a master code. 

13. A process according to one of the .preceding claims, 
characterised in that the on-board processor keeps at least 
one personal electronic log-book, preferably as a result of 
an additional command to be input by the particular user. 

14. A process according to Claim 13, characterised in that 
the data of the electronic log-book are stored on- 
board with write -protection, such that they cannot be 
subsequently manipulated even when a master code is 
known . 

15. A process according to one of the preceding claims, 
characterised in that the user-specific information stored 
on the data carrier . comprises official data relating to the 
owner, in particular data relating to the driving license 
of the owner. 

16. A process according to one of the preceding claims, 
characterised in that the user-specific information stored 
on the data carrier comprises data of insurance companies, 
in particular data relating to third-party insurance of the 
owner. 

17. A process according to. one of the preceding claims, 
characterised in that the user-specific information stored 
on the data carrier comprises data of credit institutions, 
in particular data relating to account balances or credit 
ratings of the owner. 



18. A process according to one of Claims 15 to 17, 
characterised in that the of f icial ..data, insurance 
company data and credit institution data can be 
entered or altered on the data carrier of the. owner 
only by authorised agents of the particular 
institution. 

19. A process according to Claim 18, characterised in that 
the official data, . insurance company data and credit 
institution data are altered automatically on the data 
carrier of the owner by means of suitable devices of 
the particular institution. 

20. A process according to one of the preceding claims, 
characterised in that the on-board evaluation of the 
information supplied by the data carrier of the user and/or 
via the on-board recognition device is performed by making 
a data bank enquiry, in particular via radio. 

21. A process according to one of the preceding . claims , 
characterised in that the user-specific information for 
identifying the driver. of the. released motor vehicle is 
forwarded at least in part, for example via radio, to 
external, devices, for example . police speed check points, 
border control points, access devices to car parks, hotels 
or repair workshops, automatic teller machines and the 
like . 

22. A process according to one oF- the preceding claims, 
characterised in that the user-specific information is used 
to individually adjust vehicle elements such as seat, 
steering wheel, mirror etc. in accordance with 
personalized, preset parameters of the particular" user . 



23. A. process according to one of the preceding claims, 
characterised in .that. an alarm is given if the result of 
the personal data comparison in the recognition device or 
processor, is negative several times in succession. 

24. A data carrier, in particular a chip card, for 
operationally releasing a motor vehicle with storage 
means containing user-specific information for the 
implementation of the process steps of one or more 
processes according to Claims 1 to 23 . 

25. A vehicle device with means for implementing the 
process steps of one or more processes according to 
Claims 1 to 23 . 

26. A vehicle device according to Claim 25, characterised 
in that the reader for detecting the user-specif ic 
information from the data carrier of the user comprises . the 
on-board recognition device for requesting further personal 
information. 

27. A vehicle device according to Claim 25 or 26, 
characterised in that the on-board processor is 
connected via a radio interface to an external . data 
processing system. 



3. Detailed Description of Invention 

The invention relates .to a process for operationally 
releasing a motor vehicle, for example by releasing the 
ignition system and/or fuel supply and/or disabling an 
alarm system of the motor vehicle, wherein the operational 
release takes place as a result of the supply of a data 
carrier, in particular a chip card, into an on-board 
reader, when the .reader recognises that the supplied data 
carrier is. valid and has stored data authorising the 
release, and the invention relates . to a suitable data 
carrier and corresponding vehicle devices therefore. 

Such a process is known from SE 93 00 329 .A. 

A number of technical devices are commercially available 
for protecting motor vehicles from unauthorised use, ..in 
particular from theft. In addition to lockable vehicle 
doors, which have been. used since the beginning of 
automobile construction, for. many decades an ignition lock 
has been in use which can generally be released by means of 
an ignition key which normally simultaneously serves to 
open the vehicle doors. 

As such mechanical locks can easily be "cracked" by thieves 
with technical know-how, for increased theft protection 
magnetic cards with built-in electronic chips have also 
been. in use for . some years; such magnetic cards can be 
recognised by an on-board reader and, in the case of 
appropriate authorization, can release the ignition system 
and/or fuel supply and disable possible alarm systems in 
the motor vehicle. Such a locking system for. motor 
vehicles is described for example in the document SE 93 00 
329 A referred to . in the introduction. 



DE 44 09 166 CI describes a different type of access 
control device for a vehicle which likewise uses a. portable 
chip card whose storage unit stores personal and/ or. 
vehicle-specific data in coded form.. However this does not 
serve actually to operationally release the vehicle but 
requests . access authorization to the vehicle provided with 
the chip card via. an external, stationary control unit at 
the roadside and via a vehicle control device in the 
vehicle itself. The signals to and from the stationary 
control unit can be transmitted over a long range and the 
signals between the vehicle control device and the chip 
card can be transmitted over a short . range. In the known 
access control device the. chip card can also comprise. a 
credit memory .from which a payment amount is debited when 
access to the initially barred area is subject to charge. 

An essential, shortcoming of these known approaches consists 
in that an unauthorised vehicle user, in particular, also a 
vehicle thief, can easily start up and drive away the 
vehicle simply by being in possession of the chip card. 

In contrast, the object of the present invention is to 
propose a process of the type described in the introduction 
and a data carrier suitable therefore and corresponding 
vehicle device which virtually eliminate the unauthorised 
use of the motor vehicle even when the "correct" chip card 
is available . 

In accordance with the invention, this object is achieved 
in that the data carrier has stored user-specific 
information relating to the owner of the data carrier, 
which information is detected by the reader; supplied to an 
on-board processor and compared therein with information 
stored on-board, that as a function of the result of the 



comparison, further personal information is requested of 
the user by an on-board recognition device, supplied to che 
on-board processor, and compared with information stored 
on-board relating to the identity of the permissible 
user(s), and that as a function of the result of the 
personal data comparison, the operational release of the 
motor vehicle does or does not take place . 

in this way it is ensured that not just the mere (possibly 
unauthorised) possession of the data carrier is . sufficient 
to facilitate the operational release, but only the input 
of further personal information generally unavailable to an 
unauthorised person. Additionally however, user-specific 
information relating to the authorised owner, which a 
potential vehicle thief could obtain or forge only with 
great difficulty, is also already contained on the data 
carrier. The operational release can . thus ■ only take place 
both if the user-specific, personalized data. carrier is 
accepted by the on-board system and if a personal 
recognition of the user has taken- place on the basis of 
further information supplied to the on-board system. Even 
if a potential vehicle thief has obtained a data carrier of 
a type which would be accepted by the on-board system, the 
data carrier would have had to have been stolen from an 
authorised person due to the . requirement of the user- 
specific information. This in itself would be of no 
further help to the potential thief however, as he will 
certainly. not be in possession of the further personal 
information additionally requested by the recognition 
device. 

In a particularly simple process variant, the personal 
information is input into the recognition device in the 
form of .an.alphanumerical code, in particular a secret 
number generally known only to the authorised users 
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(personal identification number - PIN), for example as 
known per se in connection with the protection of. credit 
cards. in the operation of automatic teller machines. For 
this purpose. only an alphanumerical input keypad is 
required by way of on-board recognition device . 

In another process variant, the personal information is 
supplied to the recognition device in the form of . an 
electronic fingerprint of the user, as already . known per se 
in connection with buildings access . 

Another. possible form of . additional protection consists in 
supplying personal information to the recognition device by 
means of acoustic signals. These can either.be emitted by 
the user himself by the use of his voice or however by 
means of a sound-generating device. 

In a preferred further development of this process variant, 
the acoustic signals contain a code word which is 
recognised by an on-board speech recognition device and 
compared with a stored code word which authorises the 
operational release. The advantage of this further 
development consists in that the code word need not be 
input via a keyboard but is simply spoken by the user. 

A particularly preferred further development of the above 
process variant consists in that the acoustic signals 
comprise voice signals emitted by the user and are compared 
in an on-board speech recognition device with stored 
frequency patterns of the voices of specified users which 
authorise the operational release.- It is known from 
criminology that the frequency patterns of human voice 
signals are so markedly personalized that basically they 
are even more suitable than "classic" fingerprints ..for 
identifying an individual * 



In another advantageous process variant the personal 
information is supplied to the recognition device in the 
form of optical signals. Like the acoustic signals 
described in .the foregoing, the optical signals can 
likewise be emitted directly from the user or by the use of 
an additional device .(lamp etc.), in which case the 
recognition device must comprise an optical . detector . 

An advantageous further development of this process variant 
consists in . that the optical signals comprise light of a 
specific frequency and/or pulse sequence and are compared 
on-board with stored frequencies and/or pulse sequences 
which authorise the operational release. Such 
individualized . frequencies and/or pulse sequences can 
readily be implemented in known illumination mean's, such as 
mini-lasers. 

A preferred further . development of . the above described 
process variant is that.. in which the optical signals 
comprise image patterns and are compared in an.on-board 
image recognition device with stored .image patterns which 
authorise the operational release. Such image patterns can 
again be highly personalized and thus user-specific. 

In simple further developments of the above process 
variant, the image patterns can be applied for example to 
an identification badge carried by the authorised user. 

However, a particularly preferred., further development is 
that in which the image patterns comprise the . face of the 
relevant user, in particular not merely -s photograph of the 
user. but his actual current appearance. The personal image 
recognition device must then be capable of comparing image 
patterns of the .faces of different authorised users with an 



instantaneously presented image pattern. Such shape- 
pattern recognition programs are already known per se. 



Another possibility of .requesting a personal authorization 
consists in that the personal .information is .supplied to 
the .recognition device .by .means of weight: signals of the 
particular user and that the weight signals are compared 
with weight values of authorised ■ users stored on-board. 
This can be determined relatively easily by means of a 
weight sensor built-in for . example to the driver's seat, it 
being necessary of course that the weight information 
relates to the individual .user . within reasonable limits. 
It is rather unlikely that a potential vehicle thief who 
has obtained the data carrier, anyhow already 
individualised by the user^-specif ic information, will also 
possess the correct -weight category" of the authorised 
user. 

A particularly preferred process variant is that in which 
the information stored on-board relating to the identity of 
the permissible user(s) can be altered by means of a master 
code. In .this way for example a car hire firm or company 
vehicle fleet. can adapt the data carriers to the constantly 
changing group of authorised users . 

Another particularly advantageous process variant is that 
in which. the on-board processor keeps at least one personal 
electronic log-book, preferably as a. result of an 
additional command to .be input by the particular user. The 
electronic log-book can also basically be kept 
automatically and compulsorily for"-, all users and in the 
case: Df each use of the vehicle, which again • is suitable 
for example for a large company vehicle fleet or car- 
sharing variants where. .the vehicles are operated by 
constantly changing drivers. By means of the user-specific 



information on the data carrier and the additional personal 
information supplied to the . recognition device, an 
individual electronic log-book can be kept automatically in 
every vehicle, potentially for every possible driver. 

In order also to render the electronic log-book suitable 
for of ficial. purposes, . in a further development of this 
embodiment it is provided that the data of the electronic 
log-book are stored on-board with write-protection, such 
that even when a master code is known. they cannot.be 
subsequently manipulated. As a result, the electronic log- 
book is also useful for example in the case of police 
enquiries, financial checks, tax checks and the like by way 
of documentary evidence and possibly even. legal evidence. 

In another . particularly preferred process variant, the 
user-specific information stored on. the data carrier 
comprises official data relating to the owner, in 
particular data relating to the driving license of the 
owner. In this way, considered over the long-term, the 
operation of a motor vehicle can be directly linked to the 
validity of a driving license and, via further vehicle- 
and/or holder-specific data stored on the data carrier, 
also to the operating permission of the vehicle. Thus 
official driving bans, for example due to a smog alert, 
personal offenses by the holder. of a driving license, or 
driving license restrictions (e.g. in the event of the 
night-blindness of the holder) can.also.be enforced 
directly and without the costly use of police checks. 

In other process variants, the .user-specific information 
stored on the data carrier comprises . data of .insurance 
companies, in particular data . relating to third-party 
insurance of the owner. In this way it is possible for 
example to prevent a vehicle with inadequate third party 



J... I, J J .11 



insurance from. being operated .at all. which protects the 
general public from the ..situation in which claims for 
damages may be unenforceable in the case of accidents 
caused by uninsured persons. 

Furthermore, in a variant. of the process according to the 
invention the user-specific information stored on the data 
carrier can comprise data of credit institutions,, in 
particular. data relating to account balances or credit- 
ratings of the owner. This opens up the possibility of 
also impressing credit card functions for example on the 
chip card which, in accordance with the invention, serves 
as -electronic ignition key". 

For reasons of data protection and also to protect the 
authorised owner, the official data, insurance company 
data, credit institution data, or data of other 
institutions are to be capable of being entered or altered 
on the data carrier of the owner only by authorised agents 
of the particular. institution. 

A particularly preferred further development is that in 
which the official data, insurance company data, and credit 
institution data are altered automatically on the data 
carrier of the owner by means of suitable equipment of the 
particular institution. This can be effected either by 
special processing of the chip card in a device provided 
for this purpose (for example "loading" credit for the 
credit card function, entering or erasing driving license 
penalty points in. the case of non-compliance with road- 
traffic laws and regulations, or entering insurance. cover 
on the chip card) or also automatically for example as a 
result of the elapse of a time interval if a lock function 
is integrated on the chip card. 



Another particularly preferred variant of the process 
according to. the invention is that in which the on-board 
evaluation of the information supplied by. the data carrier 
of the. user and/or via the on-board recognition device is 
performed by making a data bank enquiry, in particular via 
radio. In this way the request- and evaluation function 
can be placed on a considerably broader basis since the 
actual data processing is removed from the vehicle itself 
so that it is unnecessary to provide substantial 
processing- and storage capacity in the vehicle. 

In another particularly preferred process variant it is 
provided that the user-specific information identifying the 
driver of the released vehicle is forwarded at least in 
part, for example via radio/ to external devices, for 
example to police speed check points, to border control 
points, to access equipment of service providers such as 
car parks, hotels or repair workshops, to automatic teller 
machines .and the like. . This renders possible .the automatic 
handling of services and control functions ..in association 
with the operation of a motor vehicle. on a large scale and 
to a wide extent while still taking into account individual 
features. 

Increased comfort and user-friendliness .is provided by a 
further process variant . in which the user-specific 
information is used to . individually adjust vehicle elements 
such as seat, steering wheel, mirror etc, in accordance 
with personalized preset parameters of the particular . user . 

Thus each user can individually store on his data carrier 
the setting parameters which are most comfortable for him, 
for example by the use of a master. code; when the vehicle 
in question is used, these setting parameters are then 
automatically implemented by means of . electrical seat-, 
steering wheel- and mirror adjustment .before the engine is 
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started. 

Another.advantageous variant of the process according to 
the invention is that in which an alarm is given if the 
result of the personal data comparison in the recognition 
device or processor is negative several times in 
succession. This feature is known for example in the 
context of bank cards where, after several unsuccessful 
inputs of a PIN. the card is retained by an automatic 
teller machine. 

The scope of ..the present invention also includes a data 
carrier, in particular a chip card, for. the operational 
release of a motor vehicle with storage means containing 
user-specific information for the implementation of the 
above described process steps according to the invention. 

The scope of the invention also includes a vehicle device 
equipped with means for implementing the above described 
process steps according to the invention. 

A particularly preferred embodiment of the vehicle device 
according to the invention is that in which. the reader for 
detecting the user-specific information from the data 
carrier. of the user comprises the on-board recognition 
device for requesting further personal information. For 
example the reader can be equipped with a keyboard for the 
alphanumerical input. of a PIN. 

An embodiment. in which the on-board processor is connected 
via a radio interface to an, external data processing system 
is also particularly advantageous. In this way. the 
processing and storage capacity within the motor vehicle 
can be kept extremely small without restricting the 
(virtually unlimited) possibilities offered by the 
application of the process according to the invention. 
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A process for operationally releasing a motor vehicle by- 
supplying a data carrier. into .an on -board reader is 
characterised in that the data carrier has stored user- 
specific information relating to the owner, which 
information is detected by the reader, supplied to an on- 
board processor, and compared with information stored 
therein, that further personal information is requested of 
, the user by an on-board recognition device, supplied to the 
processor, and compared with information stored on-board 
relating to the identity of the permissible user(s), and 
that as a function of the result of the personal data 
comparison, the motor . vehicle is operationally released. 
In this way it is possible virtually to eliminate the 
unauthorised use of the motor vehicle, even when . the 
"correct" chip card is available. 
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